./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product55.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product55.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1741a5d4e19b6faba6ff51056891b76c8b4c0acd4f550f71706571820842dcfa --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-19 06:49:49,602 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-19 06:49:49,605 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-19 06:49:49,657 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-19 06:49:49,660 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-19 06:49:49,662 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-19 06:49:49,665 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-19 06:49:49,670 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-19 06:49:49,674 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-19 06:49:49,676 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-19 06:49:49,678 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-19 06:49:49,682 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-19 06:49:49,683 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-19 06:49:49,688 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-19 06:49:49,689 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-19 06:49:49,692 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-19 06:49:49,694 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-19 06:49:49,700 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-19 06:49:49,703 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-19 06:49:49,705 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-19 06:49:49,711 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-19 06:49:49,713 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-19 06:49:49,716 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-19 06:49:49,717 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-19 06:49:49,727 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-19 06:49:49,732 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-19 06:49:49,732 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-19 06:49:49,734 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-19 06:49:49,735 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-19 06:49:49,737 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-19 06:49:49,737 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-19 06:49:49,738 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-19 06:49:49,739 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-19 06:49:49,741 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-19 06:49:49,743 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-19 06:49:49,745 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-19 06:49:49,746 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-19 06:49:49,747 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-19 06:49:49,747 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-19 06:49:49,748 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-19 06:49:49,749 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-19 06:49:49,750 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-11-19 06:49:49,794 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-19 06:49:49,794 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-19 06:49:49,795 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-19 06:49:49,795 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-19 06:49:49,797 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-19 06:49:49,797 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-19 06:49:49,797 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-19 06:49:49,798 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-19 06:49:49,798 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-19 06:49:49,798 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-19 06:49:49,800 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-19 06:49:49,800 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-19 06:49:49,800 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-19 06:49:49,801 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-19 06:49:49,801 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-19 06:49:49,801 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-19 06:49:49,802 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-19 06:49:49,802 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-19 06:49:49,803 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-19 06:49:49,803 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-19 06:49:49,804 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-19 06:49:49,804 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-19 06:49:49,804 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-19 06:49:49,806 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-19 06:49:49,806 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-19 06:49:49,807 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-19 06:49:49,807 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-19 06:49:49,807 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-19 06:49:49,808 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-19 06:49:49,808 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-19 06:49:49,808 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-19 06:49:49,809 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-19 06:49:49,809 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 06:49:49,810 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-19 06:49:49,810 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-19 06:49:49,810 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-19 06:49:49,810 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-19 06:49:49,811 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-19 06:49:49,811 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-19 06:49:49,812 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-19 06:49:49,812 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-19 06:49:49,813 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1741a5d4e19b6faba6ff51056891b76c8b4c0acd4f550f71706571820842dcfa [2022-11-19 06:49:50,188 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-19 06:49:50,226 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-19 06:49:50,229 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-19 06:49:50,230 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-19 06:49:50,231 INFO L275 PluginConnector]: CDTParser initialized [2022-11-19 06:49:50,232 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/../../sv-benchmarks/c/product-lines/minepump_spec4_product55.cil.c [2022-11-19 06:49:50,314 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/data/4f11a3012/e112f221d0d3457187f98e45ee99dfa0/FLAGd5d572c8f [2022-11-19 06:49:50,918 INFO L306 CDTParser]: Found 1 translation units. [2022-11-19 06:49:50,918 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/sv-benchmarks/c/product-lines/minepump_spec4_product55.cil.c [2022-11-19 06:49:50,932 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/data/4f11a3012/e112f221d0d3457187f98e45ee99dfa0/FLAGd5d572c8f [2022-11-19 06:49:51,235 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/data/4f11a3012/e112f221d0d3457187f98e45ee99dfa0 [2022-11-19 06:49:51,238 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-19 06:49:51,242 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-19 06:49:51,246 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-19 06:49:51,247 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-19 06:49:51,251 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-19 06:49:51,252 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 06:49:51" (1/1) ... [2022-11-19 06:49:51,255 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6033cf2c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:51, skipping insertion in model container [2022-11-19 06:49:51,255 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 06:49:51" (1/1) ... [2022-11-19 06:49:51,264 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-19 06:49:51,320 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-19 06:49:51,618 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/sv-benchmarks/c/product-lines/minepump_spec4_product55.cil.c[6887,6900] [2022-11-19 06:49:51,685 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 06:49:51,695 INFO L203 MainTranslator]: Completed pre-run [2022-11-19 06:49:51,749 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/sv-benchmarks/c/product-lines/minepump_spec4_product55.cil.c[6887,6900] [2022-11-19 06:49:51,824 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-19 06:49:51,848 INFO L208 MainTranslator]: Completed translation [2022-11-19 06:49:51,848 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:51 WrapperNode [2022-11-19 06:49:51,849 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-19 06:49:51,850 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-19 06:49:51,850 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-19 06:49:51,850 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-19 06:49:51,859 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:51" (1/1) ... [2022-11-19 06:49:51,892 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:51" (1/1) ... [2022-11-19 06:49:51,929 INFO L138 Inliner]: procedures = 57, calls = 104, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 230 [2022-11-19 06:49:51,930 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-19 06:49:51,930 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-19 06:49:51,930 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-19 06:49:51,931 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-19 06:49:51,941 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:51" (1/1) ... [2022-11-19 06:49:51,941 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:51" (1/1) ... [2022-11-19 06:49:51,944 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:51" (1/1) ... [2022-11-19 06:49:51,944 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:51" (1/1) ... [2022-11-19 06:49:51,949 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:51" (1/1) ... [2022-11-19 06:49:51,970 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:51" (1/1) ... [2022-11-19 06:49:51,972 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:51" (1/1) ... [2022-11-19 06:49:51,973 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:51" (1/1) ... [2022-11-19 06:49:51,976 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-19 06:49:51,976 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-19 06:49:51,977 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-19 06:49:51,977 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-19 06:49:51,978 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:51" (1/1) ... [2022-11-19 06:49:51,985 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-19 06:49:52,009 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:49:52,039 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-19 06:49:52,066 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-19 06:49:52,103 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-19 06:49:52,103 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-19 06:49:52,104 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-19 06:49:52,104 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-19 06:49:52,104 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-19 06:49:52,104 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-19 06:49:52,104 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-19 06:49:52,105 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-19 06:49:52,105 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-19 06:49:52,105 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-19 06:49:52,105 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-19 06:49:52,106 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-19 06:49:52,106 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-19 06:49:52,106 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-19 06:49:52,106 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-19 06:49:52,106 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-19 06:49:52,107 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-19 06:49:52,107 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-19 06:49:52,107 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-19 06:49:52,107 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-19 06:49:52,233 INFO L235 CfgBuilder]: Building ICFG [2022-11-19 06:49:52,251 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-19 06:49:52,622 INFO L276 CfgBuilder]: Performing block encoding [2022-11-19 06:49:52,734 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-19 06:49:52,735 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-19 06:49:52,738 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 06:49:52 BoogieIcfgContainer [2022-11-19 06:49:52,738 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-19 06:49:52,741 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-19 06:49:52,741 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-19 06:49:52,745 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-19 06:49:52,746 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 06:49:51" (1/3) ... [2022-11-19 06:49:52,747 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7750ab37 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 06:49:52, skipping insertion in model container [2022-11-19 06:49:52,747 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 06:49:51" (2/3) ... [2022-11-19 06:49:52,747 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7750ab37 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 06:49:52, skipping insertion in model container [2022-11-19 06:49:52,748 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 06:49:52" (3/3) ... [2022-11-19 06:49:52,749 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product55.cil.c [2022-11-19 06:49:52,772 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-19 06:49:52,773 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-19 06:49:52,832 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-19 06:49:52,840 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@7ea1f3f5, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-19 06:49:52,840 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-19 06:49:52,846 INFO L276 IsEmpty]: Start isEmpty. Operand has 67 states, 42 states have (on average 1.4761904761904763) internal successors, (62), 53 states have internal predecessors, (62), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-19 06:49:52,856 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2022-11-19 06:49:52,857 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:49:52,858 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:49:52,858 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:49:52,865 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:49:52,865 INFO L85 PathProgramCache]: Analyzing trace with hash 224364336, now seen corresponding path program 1 times [2022-11-19 06:49:52,876 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:49:52,876 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [246852903] [2022-11-19 06:49:52,877 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:49:52,877 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:49:53,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:49:53,175 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:49:53,176 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:49:53,176 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [246852903] [2022-11-19 06:49:53,177 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [246852903] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:49:53,177 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:49:53,178 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-19 06:49:53,179 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1489438342] [2022-11-19 06:49:53,180 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:49:53,186 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-19 06:49:53,190 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:49:53,233 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-19 06:49:53,234 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-19 06:49:53,237 INFO L87 Difference]: Start difference. First operand has 67 states, 42 states have (on average 1.4761904761904763) internal successors, (62), 53 states have internal predecessors, (62), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) Second operand has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:49:53,374 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:49:53,376 INFO L93 Difference]: Finished difference Result 132 states and 185 transitions. [2022-11-19 06:49:53,378 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-19 06:49:53,379 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2022-11-19 06:49:53,379 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:49:53,393 INFO L225 Difference]: With dead ends: 132 [2022-11-19 06:49:53,393 INFO L226 Difference]: Without dead ends: 62 [2022-11-19 06:49:53,399 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-19 06:49:53,406 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 71 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:49:53,407 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 71 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 06:49:53,427 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-11-19 06:49:53,474 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 62. [2022-11-19 06:49:53,475 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 62 states, 39 states have (on average 1.3846153846153846) internal successors, (54), 49 states have internal predecessors, (54), 15 states have call successors, (15), 8 states have call predecessors, (15), 7 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2022-11-19 06:49:53,484 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 62 states to 62 states and 83 transitions. [2022-11-19 06:49:53,486 INFO L78 Accepts]: Start accepts. Automaton has 62 states and 83 transitions. Word has length 12 [2022-11-19 06:49:53,486 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:49:53,487 INFO L495 AbstractCegarLoop]: Abstraction has 62 states and 83 transitions. [2022-11-19 06:49:53,487 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 5.0) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:49:53,487 INFO L276 IsEmpty]: Start isEmpty. Operand 62 states and 83 transitions. [2022-11-19 06:49:53,489 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-11-19 06:49:53,489 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:49:53,489 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:49:53,489 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-19 06:49:53,490 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:49:53,490 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:49:53,491 INFO L85 PathProgramCache]: Analyzing trace with hash -1225034524, now seen corresponding path program 1 times [2022-11-19 06:49:53,491 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:49:53,491 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [117390606] [2022-11-19 06:49:53,491 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:49:53,492 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:49:53,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:49:53,657 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:49:53,657 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:49:53,657 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [117390606] [2022-11-19 06:49:53,658 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [117390606] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:49:53,658 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:49:53,658 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 06:49:53,659 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1318494139] [2022-11-19 06:49:53,659 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:49:53,660 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 06:49:53,660 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:49:53,661 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 06:49:53,661 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:49:53,662 INFO L87 Difference]: Start difference. First operand 62 states and 83 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:49:53,717 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:49:53,718 INFO L93 Difference]: Finished difference Result 96 states and 128 transitions. [2022-11-19 06:49:53,718 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 06:49:53,719 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-11-19 06:49:53,719 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:49:53,720 INFO L225 Difference]: With dead ends: 96 [2022-11-19 06:49:53,721 INFO L226 Difference]: Without dead ends: 54 [2022-11-19 06:49:53,722 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:49:53,723 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 14 mSDsluCounter, 40 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 97 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 06:49:53,724 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 97 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 06:49:53,725 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54 states. [2022-11-19 06:49:53,733 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54 to 54. [2022-11-19 06:49:53,734 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 34 states have (on average 1.411764705882353) internal successors, (48), 44 states have internal predecessors, (48), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 7 states have call predecessors, (12), 12 states have call successors, (12) [2022-11-19 06:49:53,735 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 72 transitions. [2022-11-19 06:49:53,735 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 72 transitions. Word has length 13 [2022-11-19 06:49:53,735 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:49:53,735 INFO L495 AbstractCegarLoop]: Abstraction has 54 states and 72 transitions. [2022-11-19 06:49:53,736 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:49:53,736 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 72 transitions. [2022-11-19 06:49:53,737 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2022-11-19 06:49:53,737 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:49:53,737 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:49:53,738 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-19 06:49:53,738 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:49:53,739 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:49:53,739 INFO L85 PathProgramCache]: Analyzing trace with hash -2113340253, now seen corresponding path program 1 times [2022-11-19 06:49:53,739 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:49:53,739 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1521942512] [2022-11-19 06:49:53,740 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:49:53,740 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:49:53,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:49:53,866 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:49:53,867 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:49:53,867 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1521942512] [2022-11-19 06:49:53,867 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1521942512] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:49:53,868 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:49:53,868 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 06:49:53,868 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [271770673] [2022-11-19 06:49:53,868 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:49:53,869 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-19 06:49:53,869 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:49:53,870 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-19 06:49:53,870 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-19 06:49:53,870 INFO L87 Difference]: Start difference. First operand 54 states and 72 transitions. Second operand has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:49:54,039 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:49:54,039 INFO L93 Difference]: Finished difference Result 149 states and 204 transitions. [2022-11-19 06:49:54,040 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-19 06:49:54,040 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2022-11-19 06:49:54,040 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:49:54,042 INFO L225 Difference]: With dead ends: 149 [2022-11-19 06:49:54,042 INFO L226 Difference]: Without dead ends: 97 [2022-11-19 06:49:54,043 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-19 06:49:54,045 INFO L413 NwaCegarLoop]: 65 mSDtfsCounter, 86 mSDsluCounter, 77 mSDsCounter, 0 mSdLazyCounter, 77 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 86 SdHoareTripleChecker+Valid, 142 SdHoareTripleChecker+Invalid, 86 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 77 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:49:54,045 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [86 Valid, 142 Invalid, 86 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 77 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 06:49:54,046 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2022-11-19 06:49:54,061 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 80. [2022-11-19 06:49:54,062 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 52 states have (on average 1.4038461538461537) internal successors, (73), 65 states have internal predecessors, (73), 16 states have call successors, (16), 11 states have call predecessors, (16), 11 states have return successors, (17), 10 states have call predecessors, (17), 16 states have call successors, (17) [2022-11-19 06:49:54,063 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 106 transitions. [2022-11-19 06:49:54,063 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 106 transitions. Word has length 16 [2022-11-19 06:49:54,063 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:49:54,064 INFO L495 AbstractCegarLoop]: Abstraction has 80 states and 106 transitions. [2022-11-19 06:49:54,064 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 3.75) internal successors, (15), 3 states have internal predecessors, (15), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:49:54,064 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 106 transitions. [2022-11-19 06:49:54,065 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-11-19 06:49:54,066 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:49:54,066 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:49:54,066 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-19 06:49:54,066 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:49:54,067 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:49:54,067 INFO L85 PathProgramCache]: Analyzing trace with hash -325721561, now seen corresponding path program 1 times [2022-11-19 06:49:54,067 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:49:54,068 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [92410345] [2022-11-19 06:49:54,068 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:49:54,068 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:49:54,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:49:54,186 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:49:54,187 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:49:54,187 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [92410345] [2022-11-19 06:49:54,187 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [92410345] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:49:54,187 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:49:54,188 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 06:49:54,188 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1189582018] [2022-11-19 06:49:54,188 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:49:54,188 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-19 06:49:54,189 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:49:54,189 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-19 06:49:54,190 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-19 06:49:54,190 INFO L87 Difference]: Start difference. First operand 80 states and 106 transitions. Second operand has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:49:54,353 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:49:54,354 INFO L93 Difference]: Finished difference Result 196 states and 272 transitions. [2022-11-19 06:49:54,354 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-19 06:49:54,354 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-11-19 06:49:54,355 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:49:54,364 INFO L225 Difference]: With dead ends: 196 [2022-11-19 06:49:54,364 INFO L226 Difference]: Without dead ends: 118 [2022-11-19 06:49:54,370 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-19 06:49:54,375 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 41 mSDsluCounter, 111 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 41 SdHoareTripleChecker+Valid, 177 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:49:54,376 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [41 Valid, 177 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 06:49:54,377 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 118 states. [2022-11-19 06:49:54,419 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 118 to 111. [2022-11-19 06:49:54,422 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 111 states, 76 states have (on average 1.3157894736842106) internal successors, (100), 87 states have internal predecessors, (100), 18 states have call successors, (18), 16 states have call predecessors, (18), 16 states have return successors, (26), 16 states have call predecessors, (26), 18 states have call successors, (26) [2022-11-19 06:49:54,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 111 states to 111 states and 144 transitions. [2022-11-19 06:49:54,427 INFO L78 Accepts]: Start accepts. Automaton has 111 states and 144 transitions. Word has length 19 [2022-11-19 06:49:54,428 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:49:54,428 INFO L495 AbstractCegarLoop]: Abstraction has 111 states and 144 transitions. [2022-11-19 06:49:54,428 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 4.5) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:49:54,429 INFO L276 IsEmpty]: Start isEmpty. Operand 111 states and 144 transitions. [2022-11-19 06:49:54,432 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-19 06:49:54,432 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:49:54,433 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:49:54,433 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-19 06:49:54,433 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:49:54,434 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:49:54,434 INFO L85 PathProgramCache]: Analyzing trace with hash 396284249, now seen corresponding path program 1 times [2022-11-19 06:49:54,434 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:49:54,434 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [274290879] [2022-11-19 06:49:54,434 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:49:54,435 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:49:54,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:49:54,548 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:49:54,548 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:49:54,548 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [274290879] [2022-11-19 06:49:54,549 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [274290879] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:49:54,549 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:49:54,549 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-19 06:49:54,549 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1243128267] [2022-11-19 06:49:54,550 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:49:54,550 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 06:49:54,550 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:49:54,551 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 06:49:54,551 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:49:54,551 INFO L87 Difference]: Start difference. First operand 111 states and 144 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-19 06:49:54,631 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:49:54,632 INFO L93 Difference]: Finished difference Result 222 states and 288 transitions. [2022-11-19 06:49:54,632 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 06:49:54,633 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 32 [2022-11-19 06:49:54,633 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:49:54,634 INFO L225 Difference]: With dead ends: 222 [2022-11-19 06:49:54,634 INFO L226 Difference]: Without dead ends: 85 [2022-11-19 06:49:54,635 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-19 06:49:54,636 INFO L413 NwaCegarLoop]: 74 mSDtfsCounter, 26 mSDsluCounter, 55 mSDsCounter, 0 mSdLazyCounter, 36 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 26 SdHoareTripleChecker+Valid, 129 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 36 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 06:49:54,637 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [26 Valid, 129 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 36 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 06:49:54,638 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-11-19 06:49:54,652 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2022-11-19 06:49:54,652 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 57 states have (on average 1.263157894736842) internal successors, (72), 65 states have internal predecessors, (72), 14 states have call successors, (14), 13 states have call predecessors, (14), 13 states have return successors, (20), 12 states have call predecessors, (20), 14 states have call successors, (20) [2022-11-19 06:49:54,653 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 106 transitions. [2022-11-19 06:49:54,654 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 106 transitions. Word has length 32 [2022-11-19 06:49:54,654 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:49:54,654 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 106 transitions. [2022-11-19 06:49:54,654 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 3 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-19 06:49:54,655 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 106 transitions. [2022-11-19 06:49:54,655 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-11-19 06:49:54,656 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:49:54,656 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:49:54,656 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-19 06:49:54,656 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:49:54,657 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:49:54,657 INFO L85 PathProgramCache]: Analyzing trace with hash 586391645, now seen corresponding path program 1 times [2022-11-19 06:49:54,657 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:49:54,657 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1747404667] [2022-11-19 06:49:54,658 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:49:54,658 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:49:54,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:49:54,857 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:49:54,857 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:49:54,858 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1747404667] [2022-11-19 06:49:54,858 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1747404667] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:49:54,858 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:49:54,858 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-19 06:49:54,859 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [420248504] [2022-11-19 06:49:54,859 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:49:54,859 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-19 06:49:54,860 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:49:54,861 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-19 06:49:54,862 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-11-19 06:49:54,862 INFO L87 Difference]: Start difference. First operand 85 states and 106 transitions. Second operand has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-19 06:49:55,035 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:49:55,035 INFO L93 Difference]: Finished difference Result 240 states and 299 transitions. [2022-11-19 06:49:55,036 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-19 06:49:55,036 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 29 [2022-11-19 06:49:55,036 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:49:55,056 INFO L225 Difference]: With dead ends: 240 [2022-11-19 06:49:55,056 INFO L226 Difference]: Without dead ends: 157 [2022-11-19 06:49:55,057 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-11-19 06:49:55,066 INFO L413 NwaCegarLoop]: 61 mSDtfsCounter, 63 mSDsluCounter, 158 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 63 SdHoareTripleChecker+Valid, 219 SdHoareTripleChecker+Invalid, 85 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:49:55,068 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [63 Valid, 219 Invalid, 85 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-19 06:49:55,069 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 157 states. [2022-11-19 06:49:55,110 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 157 to 128. [2022-11-19 06:49:55,111 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 128 states, 87 states have (on average 1.2183908045977012) internal successors, (106), 97 states have internal predecessors, (106), 19 states have call successors, (19), 18 states have call predecessors, (19), 21 states have return successors, (28), 19 states have call predecessors, (28), 19 states have call successors, (28) [2022-11-19 06:49:55,113 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 128 states to 128 states and 153 transitions. [2022-11-19 06:49:55,113 INFO L78 Accepts]: Start accepts. Automaton has 128 states and 153 transitions. Word has length 29 [2022-11-19 06:49:55,114 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:49:55,114 INFO L495 AbstractCegarLoop]: Abstraction has 128 states and 153 transitions. [2022-11-19 06:49:55,114 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 3 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-19 06:49:55,115 INFO L276 IsEmpty]: Start isEmpty. Operand 128 states and 153 transitions. [2022-11-19 06:49:55,116 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-19 06:49:55,116 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:49:55,116 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:49:55,116 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-19 06:49:55,117 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:49:55,117 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:49:55,117 INFO L85 PathProgramCache]: Analyzing trace with hash 1824649193, now seen corresponding path program 1 times [2022-11-19 06:49:55,117 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:49:55,118 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [73529150] [2022-11-19 06:49:55,118 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:49:55,118 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:49:55,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:49:55,495 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:49:55,496 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:49:55,496 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [73529150] [2022-11-19 06:49:55,496 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [73529150] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:49:55,496 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-19 06:49:55,497 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-19 06:49:55,497 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [288519818] [2022-11-19 06:49:55,497 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:49:55,497 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-19 06:49:55,498 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:49:55,498 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-19 06:49:55,498 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-11-19 06:49:55,499 INFO L87 Difference]: Start difference. First operand 128 states and 153 transitions. Second operand has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-19 06:49:56,166 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:49:56,167 INFO L93 Difference]: Finished difference Result 314 states and 392 transitions. [2022-11-19 06:49:56,167 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-19 06:49:56,168 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Word has length 32 [2022-11-19 06:49:56,168 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:49:56,172 INFO L225 Difference]: With dead ends: 314 [2022-11-19 06:49:56,173 INFO L226 Difference]: Without dead ends: 231 [2022-11-19 06:49:56,174 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-11-19 06:49:56,176 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 173 mSDsluCounter, 234 mSDsCounter, 0 mSdLazyCounter, 474 mSolverCounterSat, 57 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 185 SdHoareTripleChecker+Valid, 309 SdHoareTripleChecker+Invalid, 531 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 57 IncrementalHoareTripleChecker+Valid, 474 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-19 06:49:56,177 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [185 Valid, 309 Invalid, 531 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [57 Valid, 474 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-19 06:49:56,179 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 231 states. [2022-11-19 06:49:56,240 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 231 to 208. [2022-11-19 06:49:56,241 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 208 states, 142 states have (on average 1.2183098591549295) internal successors, (173), 159 states have internal predecessors, (173), 31 states have call successors, (31), 27 states have call predecessors, (31), 34 states have return successors, (46), 32 states have call predecessors, (46), 31 states have call successors, (46) [2022-11-19 06:49:56,244 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 208 states to 208 states and 250 transitions. [2022-11-19 06:49:56,245 INFO L78 Accepts]: Start accepts. Automaton has 208 states and 250 transitions. Word has length 32 [2022-11-19 06:49:56,246 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:49:56,247 INFO L495 AbstractCegarLoop]: Abstraction has 208 states and 250 transitions. [2022-11-19 06:49:56,247 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 3.5714285714285716) internal successors, (25), 7 states have internal predecessors, (25), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-19 06:49:56,247 INFO L276 IsEmpty]: Start isEmpty. Operand 208 states and 250 transitions. [2022-11-19 06:49:56,253 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-11-19 06:49:56,253 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:49:56,254 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:49:56,254 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-19 06:49:56,254 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:49:56,255 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:49:56,255 INFO L85 PathProgramCache]: Analyzing trace with hash -873562763, now seen corresponding path program 1 times [2022-11-19 06:49:56,255 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:49:56,255 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [325445221] [2022-11-19 06:49:56,255 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:49:56,256 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:49:56,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:49:56,501 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 17 proven. 4 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-19 06:49:56,501 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:49:56,501 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [325445221] [2022-11-19 06:49:56,504 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [325445221] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 06:49:56,504 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1532566089] [2022-11-19 06:49:56,505 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:49:56,505 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:49:56,505 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:49:56,513 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 06:49:56,551 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-19 06:49:56,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:49:56,659 INFO L263 TraceCheckSpWp]: Trace formula consists of 284 conjuncts, 6 conjunts are in the unsatisfiable core [2022-11-19 06:49:56,669 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:49:56,832 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 17 proven. 4 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-19 06:49:56,832 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 06:49:57,042 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 17 proven. 4 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-19 06:49:57,042 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1532566089] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 06:49:57,043 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1251783967] [2022-11-19 06:49:57,067 INFO L159 IcfgInterpreter]: Started Sifa with 34 locations of interest [2022-11-19 06:49:57,067 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 06:49:57,072 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 06:49:57,078 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 06:49:57,078 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 06:50:03,352 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 140 for LOIs [2022-11-19 06:50:04,158 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 148 for LOIs [2022-11-19 06:50:04,340 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 114 for LOIs [2022-11-19 06:50:04,404 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 06:50:20,711 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1251783967] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:50:20,711 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-11-19 06:50:20,711 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [19] imperfect sequences [7, 5, 5] total 29 [2022-11-19 06:50:20,712 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [680332059] [2022-11-19 06:50:20,712 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:50:20,713 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-11-19 06:50:20,713 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:50:20,714 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-11-19 06:50:20,714 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=153, Invalid=659, Unknown=0, NotChecked=0, Total=812 [2022-11-19 06:50:20,715 INFO L87 Difference]: Start difference. First operand 208 states and 250 transitions. Second operand has 20 states, 18 states have (on average 1.5555555555555556) internal successors, (28), 18 states have internal predecessors, (28), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-19 06:50:26,941 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:50:26,941 INFO L93 Difference]: Finished difference Result 340 states and 411 transitions. [2022-11-19 06:50:26,941 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-19 06:50:26,942 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 18 states have (on average 1.5555555555555556) internal successors, (28), 18 states have internal predecessors, (28), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 57 [2022-11-19 06:50:26,942 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:50:26,943 INFO L225 Difference]: With dead ends: 340 [2022-11-19 06:50:26,944 INFO L226 Difference]: Without dead ends: 248 [2022-11-19 06:50:26,945 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 186 GetRequests, 141 SyntacticMatches, 10 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 527 ImplicationChecksByTransitivity, 21.4s TimeCoverageRelationStatistics Valid=250, Invalid=1082, Unknown=0, NotChecked=0, Total=1332 [2022-11-19 06:50:26,945 INFO L413 NwaCegarLoop]: 41 mSDtfsCounter, 117 mSDsluCounter, 243 mSDsCounter, 0 mSdLazyCounter, 451 mSolverCounterSat, 56 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 117 SdHoareTripleChecker+Valid, 284 SdHoareTripleChecker+Invalid, 507 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 451 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-19 06:50:26,946 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [117 Valid, 284 Invalid, 507 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [56 Valid, 451 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-11-19 06:50:26,946 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 248 states. [2022-11-19 06:50:26,979 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 248 to 239. [2022-11-19 06:50:26,979 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 239 states, 165 states have (on average 1.206060606060606) internal successors, (199), 182 states have internal predecessors, (199), 35 states have call successors, (35), 31 states have call predecessors, (35), 38 states have return successors, (50), 36 states have call predecessors, (50), 35 states have call successors, (50) [2022-11-19 06:50:26,981 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 239 states to 239 states and 284 transitions. [2022-11-19 06:50:26,981 INFO L78 Accepts]: Start accepts. Automaton has 239 states and 284 transitions. Word has length 57 [2022-11-19 06:50:26,981 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:50:26,981 INFO L495 AbstractCegarLoop]: Abstraction has 239 states and 284 transitions. [2022-11-19 06:50:26,982 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 18 states have (on average 1.5555555555555556) internal successors, (28), 18 states have internal predecessors, (28), 4 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-19 06:50:26,982 INFO L276 IsEmpty]: Start isEmpty. Operand 239 states and 284 transitions. [2022-11-19 06:50:26,983 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-11-19 06:50:26,983 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:50:26,983 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:50:26,994 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-19 06:50:27,189 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2022-11-19 06:50:27,190 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:50:27,190 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:50:27,190 INFO L85 PathProgramCache]: Analyzing trace with hash -815979360, now seen corresponding path program 1 times [2022-11-19 06:50:27,190 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:50:27,190 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1845212543] [2022-11-19 06:50:27,191 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:50:27,191 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:50:27,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:50:27,343 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 15 proven. 4 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-11-19 06:50:27,344 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:50:27,345 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1845212543] [2022-11-19 06:50:27,345 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1845212543] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 06:50:27,345 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1227359064] [2022-11-19 06:50:27,345 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:50:27,346 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:50:27,346 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:50:27,347 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 06:50:27,366 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-19 06:50:27,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:50:27,437 INFO L263 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-19 06:50:27,439 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:50:27,483 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:50:27,483 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:50:27,484 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1227359064] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:50:27,484 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 06:50:27,484 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [5] total 6 [2022-11-19 06:50:27,484 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [348181790] [2022-11-19 06:50:27,484 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:50:27,486 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-19 06:50:27,486 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:50:27,486 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-19 06:50:27,487 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-19 06:50:27,487 INFO L87 Difference]: Start difference. First operand 239 states and 284 transitions. Second operand has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-19 06:50:27,555 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:50:27,556 INFO L93 Difference]: Finished difference Result 334 states and 410 transitions. [2022-11-19 06:50:27,556 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-19 06:50:27,557 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 59 [2022-11-19 06:50:27,558 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:50:27,560 INFO L225 Difference]: With dead ends: 334 [2022-11-19 06:50:27,560 INFO L226 Difference]: Without dead ends: 238 [2022-11-19 06:50:27,561 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 61 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-11-19 06:50:27,563 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 32 mSDsluCounter, 36 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 32 SdHoareTripleChecker+Valid, 108 SdHoareTripleChecker+Invalid, 35 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-19 06:50:27,563 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [32 Valid, 108 Invalid, 35 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-19 06:50:27,564 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 238 states. [2022-11-19 06:50:27,599 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 238 to 238. [2022-11-19 06:50:27,599 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 238 states, 165 states have (on average 1.1818181818181819) internal successors, (195), 181 states have internal predecessors, (195), 34 states have call successors, (34), 31 states have call predecessors, (34), 38 states have return successors, (47), 36 states have call predecessors, (47), 34 states have call successors, (47) [2022-11-19 06:50:27,602 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 238 states to 238 states and 276 transitions. [2022-11-19 06:50:27,602 INFO L78 Accepts]: Start accepts. Automaton has 238 states and 276 transitions. Word has length 59 [2022-11-19 06:50:27,602 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:50:27,603 INFO L495 AbstractCegarLoop]: Abstraction has 238 states and 276 transitions. [2022-11-19 06:50:27,603 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-19 06:50:27,603 INFO L276 IsEmpty]: Start isEmpty. Operand 238 states and 276 transitions. [2022-11-19 06:50:27,605 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-11-19 06:50:27,605 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:50:27,606 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:50:27,616 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-19 06:50:27,817 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2022-11-19 06:50:27,817 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:50:27,817 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:50:27,817 INFO L85 PathProgramCache]: Analyzing trace with hash 563687670, now seen corresponding path program 1 times [2022-11-19 06:50:27,817 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:50:27,817 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2014104165] [2022-11-19 06:50:27,817 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:50:27,818 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:50:27,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:50:28,111 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 14 proven. 4 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 06:50:28,111 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:50:28,115 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2014104165] [2022-11-19 06:50:28,115 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2014104165] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 06:50:28,118 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1834003874] [2022-11-19 06:50:28,119 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:50:28,119 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:50:28,119 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:50:28,120 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 06:50:28,142 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-19 06:50:28,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:50:28,218 INFO L263 TraceCheckSpWp]: Trace formula consists of 295 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-19 06:50:28,221 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:50:28,541 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:50:28,541 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:50:28,541 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1834003874] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:50:28,541 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 06:50:28,541 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [9] total 16 [2022-11-19 06:50:28,542 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1521620276] [2022-11-19 06:50:28,542 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:50:28,542 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-19 06:50:28,542 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:50:28,543 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-19 06:50:28,543 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=54, Invalid=186, Unknown=0, NotChecked=0, Total=240 [2022-11-19 06:50:28,543 INFO L87 Difference]: Start difference. First operand 238 states and 276 transitions. Second operand has 9 states, 9 states have (on average 5.333333333333333) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (8), 4 states have call predecessors, (8), 4 states have return successors, (7), 4 states have call predecessors, (7), 4 states have call successors, (7) [2022-11-19 06:50:29,071 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:50:29,072 INFO L93 Difference]: Finished difference Result 442 states and 526 transitions. [2022-11-19 06:50:29,072 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-19 06:50:29,072 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.333333333333333) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (8), 4 states have call predecessors, (8), 4 states have return successors, (7), 4 states have call predecessors, (7), 4 states have call successors, (7) Word has length 63 [2022-11-19 06:50:29,073 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:50:29,074 INFO L225 Difference]: With dead ends: 442 [2022-11-19 06:50:29,074 INFO L226 Difference]: Without dead ends: 308 [2022-11-19 06:50:29,075 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 76 GetRequests, 57 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 62 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=99, Invalid=321, Unknown=0, NotChecked=0, Total=420 [2022-11-19 06:50:29,076 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 163 mSDsluCounter, 156 mSDsCounter, 0 mSdLazyCounter, 366 mSolverCounterSat, 68 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 171 SdHoareTripleChecker+Valid, 202 SdHoareTripleChecker+Invalid, 434 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 68 IncrementalHoareTripleChecker+Valid, 366 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-19 06:50:29,076 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [171 Valid, 202 Invalid, 434 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [68 Valid, 366 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-19 06:50:29,077 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308 states. [2022-11-19 06:50:29,117 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308 to 224. [2022-11-19 06:50:29,118 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 224 states, 156 states have (on average 1.1730769230769231) internal successors, (183), 168 states have internal predecessors, (183), 33 states have call successors, (33), 32 states have call predecessors, (33), 34 states have return successors, (41), 32 states have call predecessors, (41), 33 states have call successors, (41) [2022-11-19 06:50:29,119 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 224 states to 224 states and 257 transitions. [2022-11-19 06:50:29,119 INFO L78 Accepts]: Start accepts. Automaton has 224 states and 257 transitions. Word has length 63 [2022-11-19 06:50:29,120 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:50:29,120 INFO L495 AbstractCegarLoop]: Abstraction has 224 states and 257 transitions. [2022-11-19 06:50:29,120 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.333333333333333) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (8), 4 states have call predecessors, (8), 4 states have return successors, (7), 4 states have call predecessors, (7), 4 states have call successors, (7) [2022-11-19 06:50:29,120 INFO L276 IsEmpty]: Start isEmpty. Operand 224 states and 257 transitions. [2022-11-19 06:50:29,121 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-11-19 06:50:29,121 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:50:29,122 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:50:29,136 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-19 06:50:29,328 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:50:29,328 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:50:29,329 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:50:29,329 INFO L85 PathProgramCache]: Analyzing trace with hash -737942555, now seen corresponding path program 1 times [2022-11-19 06:50:29,329 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:50:29,329 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [205199189] [2022-11-19 06:50:29,329 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:50:29,330 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:50:29,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:50:29,879 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-19 06:50:29,879 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:50:29,879 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [205199189] [2022-11-19 06:50:29,879 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [205199189] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 06:50:29,879 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [476555773] [2022-11-19 06:50:29,880 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:50:29,880 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:50:29,880 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:50:29,881 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 06:50:29,906 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-19 06:50:29,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:50:29,974 INFO L263 TraceCheckSpWp]: Trace formula consists of 295 conjuncts, 28 conjunts are in the unsatisfiable core [2022-11-19 06:50:29,976 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:50:30,278 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 8 proven. 9 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-19 06:50:30,278 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 06:50:30,854 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 1 proven. 8 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-19 06:50:30,855 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [476555773] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 06:50:30,855 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1777882504] [2022-11-19 06:50:30,861 INFO L159 IcfgInterpreter]: Started Sifa with 42 locations of interest [2022-11-19 06:50:30,861 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 06:50:30,862 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 06:50:30,863 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 06:50:30,863 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 06:50:33,191 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 125 for LOIs [2022-11-19 06:50:33,204 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 26 for LOIs [2022-11-19 06:50:33,351 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 49 for LOIs [2022-11-19 06:50:33,721 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 59 for LOIs [2022-11-19 06:50:33,912 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 33 for LOIs [2022-11-19 06:50:33,915 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 06:50:40,610 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7322#(and (= |timeShift_getWaterLevel_~retValue_acc~11#1| ~waterLevel~0) (<= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 2147483647) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~6#1| |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 0)) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~6#1| 0) (= ~methaneLevelCritical~0 0) (= ~head~0.offset 0) (<= 0 (+ |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 2147483648)) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~1#1|) (= |timeShift_getWaterLevel_~retValue_acc~11#1| |timeShift_getWaterLevel_#res#1|) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~1#1|) (= ~head~0.base 0) (= |#NULL.offset| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1|) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-19 06:50:40,611 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 06:50:40,611 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 06:50:40,611 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 9, 11] total 31 [2022-11-19 06:50:40,611 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [246203761] [2022-11-19 06:50:40,611 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 06:50:40,612 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-19 06:50:40,612 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:50:40,612 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-19 06:50:40,614 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=352, Invalid=3188, Unknown=0, NotChecked=0, Total=3540 [2022-11-19 06:50:40,614 INFO L87 Difference]: Start difference. First operand 224 states and 257 transitions. Second operand has 31 states, 28 states have (on average 3.892857142857143) internal successors, (109), 28 states have internal predecessors, (109), 13 states have call successors, (20), 10 states have call predecessors, (20), 9 states have return successors, (18), 12 states have call predecessors, (18), 12 states have call successors, (18) [2022-11-19 06:50:44,333 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:50:44,334 INFO L93 Difference]: Finished difference Result 619 states and 735 transitions. [2022-11-19 06:50:44,334 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 54 states. [2022-11-19 06:50:44,334 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 28 states have (on average 3.892857142857143) internal successors, (109), 28 states have internal predecessors, (109), 13 states have call successors, (20), 10 states have call predecessors, (20), 9 states have return successors, (18), 12 states have call predecessors, (18), 12 states have call successors, (18) Word has length 63 [2022-11-19 06:50:44,335 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:50:44,337 INFO L225 Difference]: With dead ends: 619 [2022-11-19 06:50:44,338 INFO L226 Difference]: Without dead ends: 494 [2022-11-19 06:50:44,341 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 261 GetRequests, 152 SyntacticMatches, 5 SemanticMatches, 104 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4203 ImplicationChecksByTransitivity, 9.1s TimeCoverageRelationStatistics Valid=1176, Invalid=9954, Unknown=0, NotChecked=0, Total=11130 [2022-11-19 06:50:44,342 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 1083 mSDsluCounter, 808 mSDsCounter, 0 mSdLazyCounter, 2076 mSolverCounterSat, 589 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1088 SdHoareTripleChecker+Valid, 894 SdHoareTripleChecker+Invalid, 2665 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 589 IncrementalHoareTripleChecker+Valid, 2076 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2022-11-19 06:50:44,342 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1088 Valid, 894 Invalid, 2665 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [589 Valid, 2076 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2022-11-19 06:50:44,344 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 494 states. [2022-11-19 06:50:44,412 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 494 to 385. [2022-11-19 06:50:44,412 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 385 states, 267 states have (on average 1.1685393258426966) internal successors, (312), 288 states have internal predecessors, (312), 57 states have call successors, (57), 54 states have call predecessors, (57), 60 states have return successors, (73), 56 states have call predecessors, (73), 57 states have call successors, (73) [2022-11-19 06:50:44,414 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 385 states to 385 states and 442 transitions. [2022-11-19 06:50:44,414 INFO L78 Accepts]: Start accepts. Automaton has 385 states and 442 transitions. Word has length 63 [2022-11-19 06:50:44,415 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:50:44,415 INFO L495 AbstractCegarLoop]: Abstraction has 385 states and 442 transitions. [2022-11-19 06:50:44,415 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 28 states have (on average 3.892857142857143) internal successors, (109), 28 states have internal predecessors, (109), 13 states have call successors, (20), 10 states have call predecessors, (20), 9 states have return successors, (18), 12 states have call predecessors, (18), 12 states have call successors, (18) [2022-11-19 06:50:44,415 INFO L276 IsEmpty]: Start isEmpty. Operand 385 states and 442 transitions. [2022-11-19 06:50:44,417 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2022-11-19 06:50:44,417 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:50:44,417 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:50:44,422 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-19 06:50:44,618 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:50:44,619 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:50:44,619 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:50:44,619 INFO L85 PathProgramCache]: Analyzing trace with hash -1597869975, now seen corresponding path program 2 times [2022-11-19 06:50:44,619 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:50:44,619 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [479129258] [2022-11-19 06:50:44,619 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:50:44,619 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:50:44,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:50:45,510 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 30 proven. 27 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-19 06:50:45,510 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:50:45,510 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [479129258] [2022-11-19 06:50:45,510 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [479129258] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 06:50:45,510 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [914863826] [2022-11-19 06:50:45,510 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-19 06:50:45,510 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:50:45,511 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:50:45,512 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 06:50:45,530 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-19 06:50:45,606 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-11-19 06:50:45,606 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-19 06:50:45,608 INFO L263 TraceCheckSpWp]: Trace formula consists of 309 conjuncts, 27 conjunts are in the unsatisfiable core [2022-11-19 06:50:45,611 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:50:45,823 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 62 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-19 06:50:45,823 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-19 06:50:45,823 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [914863826] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-19 06:50:45,823 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-19 06:50:45,823 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [17] total 21 [2022-11-19 06:50:45,826 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1088642929] [2022-11-19 06:50:45,826 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-19 06:50:45,827 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-19 06:50:45,827 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:50:45,827 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-19 06:50:45,828 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=59, Invalid=361, Unknown=0, NotChecked=0, Total=420 [2022-11-19 06:50:45,828 INFO L87 Difference]: Start difference. First operand 385 states and 442 transitions. Second operand has 6 states, 6 states have (on average 10.333333333333334) internal successors, (62), 5 states have internal predecessors, (62), 3 states have call successors, (11), 3 states have call predecessors, (11), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2022-11-19 06:50:46,122 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:50:46,123 INFO L93 Difference]: Finished difference Result 840 states and 982 transitions. [2022-11-19 06:50:46,123 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-19 06:50:46,123 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 10.333333333333334) internal successors, (62), 5 states have internal predecessors, (62), 3 states have call successors, (11), 3 states have call predecessors, (11), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) Word has length 94 [2022-11-19 06:50:46,124 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:50:46,126 INFO L225 Difference]: With dead ends: 840 [2022-11-19 06:50:46,126 INFO L226 Difference]: Without dead ends: 478 [2022-11-19 06:50:46,128 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 113 GetRequests, 92 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 117 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=73, Invalid=433, Unknown=0, NotChecked=0, Total=506 [2022-11-19 06:50:46,128 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 69 mSDsluCounter, 115 mSDsCounter, 0 mSdLazyCounter, 208 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 222 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 208 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-19 06:50:46,129 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [72 Valid, 200 Invalid, 222 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 208 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-19 06:50:46,130 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 478 states. [2022-11-19 06:50:46,226 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 478 to 461. [2022-11-19 06:50:46,227 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 461 states, 325 states have (on average 1.1692307692307693) internal successors, (380), 348 states have internal predecessors, (380), 68 states have call successors, (68), 65 states have call predecessors, (68), 67 states have return successors, (85), 64 states have call predecessors, (85), 68 states have call successors, (85) [2022-11-19 06:50:46,229 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 461 states to 461 states and 533 transitions. [2022-11-19 06:50:46,229 INFO L78 Accepts]: Start accepts. Automaton has 461 states and 533 transitions. Word has length 94 [2022-11-19 06:50:46,229 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:50:46,230 INFO L495 AbstractCegarLoop]: Abstraction has 461 states and 533 transitions. [2022-11-19 06:50:46,230 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 10.333333333333334) internal successors, (62), 5 states have internal predecessors, (62), 3 states have call successors, (11), 3 states have call predecessors, (11), 3 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2022-11-19 06:50:46,230 INFO L276 IsEmpty]: Start isEmpty. Operand 461 states and 533 transitions. [2022-11-19 06:50:46,231 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2022-11-19 06:50:46,231 INFO L187 NwaCegarLoop]: Found error trace [2022-11-19 06:50:46,232 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:50:46,243 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-19 06:50:46,438 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-19 06:50:46,438 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-19 06:50:46,438 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-19 06:50:46,439 INFO L85 PathProgramCache]: Analyzing trace with hash -1258577083, now seen corresponding path program 1 times [2022-11-19 06:50:46,439 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-19 06:50:46,439 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1399277680] [2022-11-19 06:50:46,439 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:50:46,439 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-19 06:50:46,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:50:47,548 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 44 proven. 58 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-19 06:50:47,548 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-19 06:50:47,548 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1399277680] [2022-11-19 06:50:47,548 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1399277680] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-19 06:50:47,548 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [175204175] [2022-11-19 06:50:47,548 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-19 06:50:47,548 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:50:47,549 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 [2022-11-19 06:50:47,550 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-19 06:50:47,559 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-19 06:50:47,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-19 06:50:47,673 INFO L263 TraceCheckSpWp]: Trace formula consists of 442 conjuncts, 39 conjunts are in the unsatisfiable core [2022-11-19 06:50:47,676 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-19 06:50:48,442 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 59 proven. 59 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-19 06:50:48,442 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-19 06:50:49,667 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 73 proven. 28 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2022-11-19 06:50:49,668 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [175204175] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-19 06:50:49,668 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [148678968] [2022-11-19 06:50:49,671 INFO L159 IcfgInterpreter]: Started Sifa with 45 locations of interest [2022-11-19 06:50:49,671 INFO L166 IcfgInterpreter]: Building call graph [2022-11-19 06:50:49,671 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-19 06:50:49,672 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-19 06:50:49,672 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-19 06:50:51,445 INFO L197 IcfgInterpreter]: Interpreting procedure waterRise with input of size 125 for LOIs [2022-11-19 06:50:51,467 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 26 for LOIs [2022-11-19 06:50:51,625 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__lowWaterSensor with input of size 49 for LOIs [2022-11-19 06:50:52,007 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__highWaterSensor with input of size 59 for LOIs [2022-11-19 06:50:52,224 INFO L197 IcfgInterpreter]: Interpreting procedure processEnvironment__wrappee__base with input of size 33 for LOIs [2022-11-19 06:50:52,226 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-19 06:50:59,402 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12029#(and (= |timeShift_getWaterLevel_~retValue_acc~11#1| ~waterLevel~0) (<= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 2147483647) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~6#1| |timeShift_getWaterLevel_#res#1|) (not (= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 0)) (= |timeShift___utac_acc__Specification4_spec__1_~tmp~6#1| 0) (= ~methaneLevelCritical~0 0) (= ~head~0.offset 0) (<= 0 (+ |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 2147483648)) (= ~pumpRunning~0 |timeShift_isPumpRunning_~retValue_acc~1#1|) (= |timeShift_getWaterLevel_~retValue_acc~11#1| |timeShift_getWaterLevel_#res#1|) (= 1 ~systemActive~0) (= |timeShift_isPumpRunning_#res#1| |timeShift_isPumpRunning_~retValue_acc~1#1|) (= ~head~0.base 0) (= |#NULL.offset| 0) (= |timeShift_isPumpRunning_#res#1| |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1|) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))' at error location [2022-11-19 06:50:59,402 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-19 06:50:59,402 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-19 06:50:59,403 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 18, 17] total 50 [2022-11-19 06:50:59,403 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2139448497] [2022-11-19 06:50:59,403 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-19 06:50:59,404 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 50 states [2022-11-19 06:50:59,404 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-19 06:50:59,404 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 50 interpolants. [2022-11-19 06:50:59,406 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=738, Invalid=5424, Unknown=0, NotChecked=0, Total=6162 [2022-11-19 06:50:59,406 INFO L87 Difference]: Start difference. First operand 461 states and 533 transitions. Second operand has 50 states, 47 states have (on average 4.0638297872340425) internal successors, (191), 46 states have internal predecessors, (191), 23 states have call successors, (30), 11 states have call predecessors, (30), 18 states have return successors, (31), 23 states have call predecessors, (31), 23 states have call successors, (31) [2022-11-19 06:51:01,069 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-19 06:51:01,069 INFO L93 Difference]: Finished difference Result 583 states and 680 transitions. [2022-11-19 06:51:01,070 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-19 06:51:01,070 INFO L78 Accepts]: Start accepts. Automaton has has 50 states, 47 states have (on average 4.0638297872340425) internal successors, (191), 46 states have internal predecessors, (191), 23 states have call successors, (30), 11 states have call predecessors, (30), 18 states have return successors, (31), 23 states have call predecessors, (31), 23 states have call successors, (31) Word has length 110 [2022-11-19 06:51:01,073 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-19 06:51:01,074 INFO L225 Difference]: With dead ends: 583 [2022-11-19 06:51:01,074 INFO L226 Difference]: Without dead ends: 0 [2022-11-19 06:51:01,081 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 378 GetRequests, 273 SyntacticMatches, 9 SemanticMatches, 96 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4537 ImplicationChecksByTransitivity, 9.0s TimeCoverageRelationStatistics Valid=1320, Invalid=8186, Unknown=0, NotChecked=0, Total=9506 [2022-11-19 06:51:01,083 INFO L413 NwaCegarLoop]: 44 mSDtfsCounter, 806 mSDsluCounter, 416 mSDsCounter, 0 mSdLazyCounter, 937 mSolverCounterSat, 475 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 806 SdHoareTripleChecker+Valid, 460 SdHoareTripleChecker+Invalid, 1412 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 475 IncrementalHoareTripleChecker+Valid, 937 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-19 06:51:01,084 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [806 Valid, 460 Invalid, 1412 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [475 Valid, 937 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-19 06:51:01,084 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-19 06:51:01,085 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-19 06:51:01,085 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-19 06:51:01,085 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-19 06:51:01,085 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 110 [2022-11-19 06:51:01,085 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-19 06:51:01,086 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-19 06:51:01,087 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 50 states, 47 states have (on average 4.0638297872340425) internal successors, (191), 46 states have internal predecessors, (191), 23 states have call successors, (30), 11 states have call predecessors, (30), 18 states have return successors, (31), 23 states have call predecessors, (31), 23 states have call successors, (31) [2022-11-19 06:51:01,088 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-19 06:51:01,088 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-19 06:51:01,090 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-19 06:51:01,098 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-11-19 06:51:01,296 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-19 06:51:01,298 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-19 06:51:08,065 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 252 259) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (not (= 1 ~systemActive~0)) (not (= |old(~pumpRunning~0)| 1)) (= ~pumpRunning~0 1)) [2022-11-19 06:51:08,065 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 252 259) no Hoare annotation was computed. [2022-11-19 06:51:08,066 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 159 165) no Hoare annotation was computed. [2022-11-19 06:51:08,066 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 159 165) the Hoare annotation is: true [2022-11-19 06:51:08,066 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 933 944) the Hoare annotation is: true [2022-11-19 06:51:08,066 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 933 944) no Hoare annotation was computed. [2022-11-19 06:51:08,066 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 446 475) no Hoare annotation was computed. [2022-11-19 06:51:08,066 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 446 475) the Hoare annotation is: true [2022-11-19 06:51:08,067 INFO L902 garLoopResultBuilder]: At program point L471(lines 446 475) the Hoare annotation is: true [2022-11-19 06:51:08,067 INFO L899 garLoopResultBuilder]: For program point L467(line 467) no Hoare annotation was computed. [2022-11-19 06:51:08,067 INFO L899 garLoopResultBuilder]: For program point L460(lines 460 464) no Hoare annotation was computed. [2022-11-19 06:51:08,067 INFO L902 garLoopResultBuilder]: At program point L460-1(lines 460 464) the Hoare annotation is: true [2022-11-19 06:51:08,067 INFO L902 garLoopResultBuilder]: At program point L456-2(lines 456 470) the Hoare annotation is: true [2022-11-19 06:51:08,067 INFO L902 garLoopResultBuilder]: At program point L452(line 452) the Hoare annotation is: true [2022-11-19 06:51:08,068 INFO L899 garLoopResultBuilder]: For program point L452-1(line 452) no Hoare annotation was computed. [2022-11-19 06:51:08,068 INFO L895 garLoopResultBuilder]: At program point L440(line 440) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or .cse2 .cse0 .cse1) (or .cse2 (not (= |old(~waterLevel~0)| 1)) .cse0) (or .cse2 (not (= 0 ~systemActive~0))))) [2022-11-19 06:51:08,068 INFO L895 garLoopResultBuilder]: At program point L238(line 238) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse3 (or (= ~pumpRunning~0 0) (not (< 0 ~waterLevel~0)))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or .cse2 .cse0 .cse1 (and .cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse3 (= ~waterLevel~0 1)) .cse2 (not (= |old(~waterLevel~0)| 1)) .cse0) (or .cse2 (not (= 0 ~systemActive~0))))) [2022-11-19 06:51:08,068 INFO L895 garLoopResultBuilder]: At program point L238-1(lines 219 243) the Hoare annotation is: (let ((.cse1 (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1 .cse2) (or .cse3 (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1) (or .cse3 (not (= 0 ~systemActive~0))) (or .cse3 .cse0 .cse2 (and (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1))))) [2022-11-19 06:51:08,069 INFO L899 garLoopResultBuilder]: For program point L139-1(lines 138 157) no Hoare annotation was computed. [2022-11-19 06:51:08,069 INFO L899 garLoopResultBuilder]: For program point L227(lines 227 235) no Hoare annotation was computed. [2022-11-19 06:51:08,069 INFO L899 garLoopResultBuilder]: For program point L384(lines 384 390) no Hoare annotation was computed. [2022-11-19 06:51:08,069 INFO L895 garLoopResultBuilder]: At program point L223(lines 223 240) the Hoare annotation is: (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (let ((.cse5 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and (not (< 0 ~waterLevel~0)) .cse5) (and (= ~pumpRunning~0 0) .cse5)))) (.cse0 (= ~waterLevel~0 1)) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or (and .cse0 (= ~pumpRunning~0 1)) .cse1 (not (= |old(~pumpRunning~0)| 1)) .cse2) (or .cse3 .cse1 .cse2 (and .cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse3 (not (= |old(~waterLevel~0)| 1)) .cse1 (and .cse4 .cse0)) (or .cse3 (not (= 0 ~systemActive~0))))) [2022-11-19 06:51:08,069 INFO L895 garLoopResultBuilder]: At program point L380(lines 380 393) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse6 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~6#1| ~waterLevel~0))) (let ((.cse5 (and .cse1 (= ~waterLevel~0 1) .cse6)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not .cse2)) (or .cse3 (not (= |old(~pumpRunning~0)| 1)) .cse4 .cse5) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse3 .cse2 .cse5) (or .cse0 .cse3 (and (= |old(~waterLevel~0)| ~waterLevel~0) .cse6 (= ~pumpRunning~0 1)) .cse4 .cse2)))) [2022-11-19 06:51:08,070 INFO L895 garLoopResultBuilder]: At program point L380-1(lines 372 396) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse6 (= |timeShift___utac_acc__Specification4_spec__1_~tmp~6#1| ~waterLevel~0))) (let ((.cse5 (and .cse1 (= ~waterLevel~0 1) .cse6)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not .cse2)) (or .cse3 (not (= |old(~pumpRunning~0)| 1)) .cse4 .cse5) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse3 .cse2 .cse5) (or .cse0 .cse3 (and (= |old(~waterLevel~0)| ~waterLevel~0) .cse6 (= ~pumpRunning~0 1)) .cse4 .cse2)))) [2022-11-19 06:51:08,070 INFO L895 garLoopResultBuilder]: At program point L146-1(lines 146 152) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0))) (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and .cse4 (= ~waterLevel~0 1))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1 .cse2) (or .cse3 .cse4 (not .cse5)) (or .cse3 .cse0 .cse2 .cse5 (and (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1))) (or .cse3 (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse5)))) [2022-11-19 06:51:08,070 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 135 158) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse5 (= 0 ~systemActive~0)) (.cse3 (not (= 1 ~systemActive~0))) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (and .cse1 .cse2) .cse3 .cse4 .cse5) (or .cse0 .cse1 (not .cse5)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse3 (and .cse1 (= ~waterLevel~0 1)) .cse5) (or .cse3 (not (= |old(~pumpRunning~0)| 1)) .cse4 (and .cse2 (= ~pumpRunning~0 1))))) [2022-11-19 06:51:08,070 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 135 158) no Hoare annotation was computed. [2022-11-19 06:51:08,071 INFO L895 garLoopResultBuilder]: At program point L233(line 233) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or (and (= ~waterLevel~0 1) (= ~pumpRunning~0 1)) .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or .cse2 .cse0 .cse1) (or .cse2 (not (= |old(~waterLevel~0)| 1)) .cse0) (or .cse2 (not (= 0 ~systemActive~0))))) [2022-11-19 06:51:08,071 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 440) no Hoare annotation was computed. [2022-11-19 06:51:08,071 INFO L895 garLoopResultBuilder]: At program point L229(line 229) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or (and (= ~waterLevel~0 1) (= ~pumpRunning~0 1)) .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or .cse2 .cse0 .cse1) (or .cse2 (not (= |old(~waterLevel~0)| 1)) .cse0) (or .cse2 (not (= 0 ~systemActive~0))))) [2022-11-19 06:51:08,071 INFO L899 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2022-11-19 06:51:08,071 INFO L899 garLoopResultBuilder]: For program point L85-1(lines 85 91) no Hoare annotation was computed. [2022-11-19 06:51:08,072 INFO L895 garLoopResultBuilder]: At program point L527(lines 527 534) the Hoare annotation is: (let ((.cse0 (select |#memory_int| 1))) (and (= (select |#length| 15) 25) (= 9 (select |#length| 5)) (= (select |#length| 9) 21) (= 30 (select |#length| 7)) (= 1 (select |#valid| 5)) (= (select |#length| 3) 12) (= (select |#valid| 15) 1) (= ~pumpRunning~0 0) (= (select |#valid| 9) 1) (= (select |#length| 12) 25) (= (select |#valid| 11) 1) (= ~methaneLevelCritical~0 0) (= 30 (select |#length| 4)) (= 31 (select |#length| 2)) (= ~head~0.offset 0) (= 2 (select |#length| 1)) (= (select |#length| 8) 9) (= (select |#valid| 3) 1) (= (select |#valid| 7) 1) (= 30 (select |#length| 13)) (= 1 ~systemActive~0) (= 30 (select |#length| 10)) (= (select |#valid| 12) 1) (= (select |#valid| 4) 1) (= (select |#valid| 1) 1) (= (select |#length| 6) 21) (= (select |#valid| 14) 1) (= 9 (select |#length| 14)) (= (select |#valid| 0) 0) (= ~head~0.base 0) (= (select |#valid| 2) 1) (= |#NULL.offset| 0) (= 9 (select |#length| 11)) (= ~waterLevel~0 1) (= (select .cse0 0) 48) (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0) (= (select |#valid| 6) 1) (= (select .cse0 1) 0) (= |ULTIMATE.start_valid_product_~retValue_acc~5#1| |ULTIMATE.start_valid_product_#res#1|) (= (select |#valid| 10) 1) (= (select |#valid| 8) 1) (= (select |#valid| 13) 1) (< 0 |#StackHeapBarrier|) (= |ULTIMATE.start_valid_product_~retValue_acc~5#1| 1) (= ~cleanupTimeShifts~0 4) (= |#NULL.base| 0))) [2022-11-19 06:51:08,072 INFO L895 garLoopResultBuilder]: At program point L110(lines 65 112) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse0 (= 1 ~systemActive~0)) (.cse2 (not .cse4)) (.cse3 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 2 ~waterLevel~0) .cse0 .cse1 .cse2 (= ~pumpRunning~0 1)) (and .cse3 .cse0 .cse1 (= ~waterLevel~0 1) .cse2) (and .cse3 .cse1 .cse4)))) [2022-11-19 06:51:08,073 INFO L895 garLoopResultBuilder]: At program point L77(line 77) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1)) (and .cse0 .cse2 (= 0 ~systemActive~0)) (and (<= 2 ~waterLevel~0) .cse1 .cse2 (<= ~waterLevel~0 2) (= ~pumpRunning~0 1)))) [2022-11-19 06:51:08,073 INFO L902 garLoopResultBuilder]: At program point L527-2(lines 527 534) the Hoare annotation is: true [2022-11-19 06:51:08,073 INFO L899 garLoopResultBuilder]: For program point L358(lines 358 364) no Hoare annotation was computed. [2022-11-19 06:51:08,073 INFO L895 garLoopResultBuilder]: At program point L358-1(lines 358 364) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) [2022-11-19 06:51:08,073 INFO L902 garLoopResultBuilder]: At program point ULTIMATE.startENTRY(line -1) the Hoare annotation is: true [2022-11-19 06:51:08,073 INFO L899 garLoopResultBuilder]: For program point L66(lines 65 112) no Hoare annotation was computed. [2022-11-19 06:51:08,073 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-19 06:51:08,074 INFO L899 garLoopResultBuilder]: For program point L95(lines 95 108) no Hoare annotation was computed. [2022-11-19 06:51:08,074 INFO L895 garLoopResultBuilder]: At program point L87(line 87) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse0 (= 2 ~waterLevel~0)) (.cse1 (= 1 ~systemActive~0)) (.cse3 (not .cse5)) (.cse4 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)) (and .cse4 .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 (= ~waterLevel~0 1) .cse3) (and .cse4 .cse2 .cse5)))) [2022-11-19 06:51:08,074 INFO L902 garLoopResultBuilder]: At program point L116(lines 55 120) the Hoare annotation is: true [2022-11-19 06:51:08,074 INFO L899 garLoopResultBuilder]: For program point L75(lines 75 81) no Hoare annotation was computed. [2022-11-19 06:51:08,074 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 75 81) no Hoare annotation was computed. [2022-11-19 06:51:08,075 INFO L895 garLoopResultBuilder]: At program point L360(line 360) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2022-11-19 06:51:08,075 INFO L895 garLoopResultBuilder]: At program point L113(lines 64 114) the Hoare annotation is: false [2022-11-19 06:51:08,075 INFO L899 garLoopResultBuilder]: For program point L101(lines 101 107) no Hoare annotation was computed. [2022-11-19 06:51:08,075 INFO L895 garLoopResultBuilder]: At program point L101-2(lines 95 108) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse0 (= 2 ~waterLevel~0)) (.cse1 (= 1 ~systemActive~0)) (.cse3 (not .cse5)) (.cse4 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0 1)) (and .cse4 .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 (= ~waterLevel~0 1) .cse3) (and .cse4 .cse2 .cse5)))) [2022-11-19 06:51:08,075 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 167 191) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (< 0 ~waterLevel~0)) (not (= 1 ~systemActive~0)) (not (<= ~waterLevel~0 2))) [2022-11-19 06:51:08,075 INFO L895 garLoopResultBuilder]: At program point L186(line 186) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (not (= |old(~pumpRunning~0)| 0)) (< 0 ~waterLevel~0)))) (and (or .cse0 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2) .cse1) (or (not (= ~waterLevel~0 1)) .cse0 .cse1))) [2022-11-19 06:51:08,076 INFO L899 garLoopResultBuilder]: For program point L186-1(lines 167 191) no Hoare annotation was computed. [2022-11-19 06:51:08,076 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 167 191) no Hoare annotation was computed. [2022-11-19 06:51:08,076 INFO L895 garLoopResultBuilder]: At program point L181(line 181) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (not (= |old(~pumpRunning~0)| 0)) (< 0 ~waterLevel~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0)) .cse1) (or .cse0 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2) .cse1))) [2022-11-19 06:51:08,076 INFO L895 garLoopResultBuilder]: At program point L175(lines 175 183) the Hoare annotation is: (let ((.cse3 (< 0 ~waterLevel~0))) (let ((.cse1 (or (= ~pumpRunning~0 0) (not .cse3))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (and (not (= |old(~pumpRunning~0)| 0)) .cse3))) (and (or .cse0 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 1)) (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2) .cse2) (or (not (= ~waterLevel~0 1)) (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0)) .cse0 .cse2)))) [2022-11-19 06:51:08,076 INFO L895 garLoopResultBuilder]: At program point L171(lines 171 188) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (< 0 ~waterLevel~0)) (not (= 1 ~systemActive~0)) (not (<= ~waterLevel~0 2))) [2022-11-19 06:51:08,077 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 921 932) no Hoare annotation was computed. [2022-11-19 06:51:08,077 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 921 932) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= ~pumpRunning~0 1)) (not (= |old(~waterLevel~0)| 2)) (= |old(~waterLevel~0)| ~waterLevel~0)) (or (not (= ~pumpRunning~0 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (= ~waterLevel~0 1)))) [2022-11-19 06:51:08,077 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 193 217) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 1)) (= ~pumpRunning~0 1)) (or .cse0 .cse2 .cse3 .cse1) (or .cse2 .cse3 .cse1 (not (= 2 ~waterLevel~0))))) [2022-11-19 06:51:08,077 INFO L895 garLoopResultBuilder]: At program point L207(line 207) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~waterLevel~0 1))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0))) (or .cse2 .cse0 .cse1) (or .cse2 .cse1 (not (= |old(~pumpRunning~0)| 1))))) [2022-11-19 06:51:08,077 INFO L895 garLoopResultBuilder]: At program point L203(line 203) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~waterLevel~0 1))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0))) (or .cse2 .cse0 .cse1) (or .cse2 .cse1 (and (= |processEnvironment__wrappee__lowWaterSensor_~tmp~2#1| 1) (= ~pumpRunning~0 1)) (not (= |old(~pumpRunning~0)| 1))))) [2022-11-19 06:51:08,077 INFO L899 garLoopResultBuilder]: For program point L201(lines 201 209) no Hoare annotation was computed. [2022-11-19 06:51:08,077 INFO L895 garLoopResultBuilder]: At program point L197(lines 197 214) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 1)) (= ~pumpRunning~0 1)) (or .cse0 .cse2 .cse3 .cse1) (or .cse2 .cse3 .cse1 (not (= 2 ~waterLevel~0))))) [2022-11-19 06:51:08,077 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 193 217) no Hoare annotation was computed. [2022-11-19 06:51:08,078 INFO L895 garLoopResultBuilder]: At program point L212(line 212) the Hoare annotation is: (let ((.cse4 (not (= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (< 0 ~waterLevel~0))) (.cse3 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= 2 ~waterLevel~0))) (or .cse4 .cse3 (not (= |old(~pumpRunning~0)| 1))) (or .cse4 .cse0 .cse1 .cse2 .cse3))) [2022-11-19 06:51:08,078 INFO L899 garLoopResultBuilder]: For program point L212-1(lines 193 217) no Hoare annotation was computed. [2022-11-19 06:51:08,081 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-19 06:51:08,083 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-19 06:51:08,129 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.11 06:51:08 BoogieIcfgContainer [2022-11-19 06:51:08,131 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-19 06:51:08,132 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-19 06:51:08,132 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-19 06:51:08,133 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-19 06:51:08,133 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 06:49:52" (3/4) ... [2022-11-19 06:51:08,136 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-19 06:51:08,142 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-19 06:51:08,143 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-19 06:51:08,143 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-19 06:51:08,143 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-19 06:51:08,143 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-19 06:51:08,144 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-19 06:51:08,144 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-19 06:51:08,144 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2022-11-19 06:51:08,169 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 49 nodes and edges [2022-11-19 06:51:08,170 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 13 nodes and edges [2022-11-19 06:51:08,170 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 6 nodes and edges [2022-11-19 06:51:08,171 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-19 06:51:08,172 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-19 06:51:08,202 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && pumpRunning == 0) && \valid[9] == 1) && unknown-#length-unknown[12] == 25) && \valid[11] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && 31 == unknown-#length-unknown[2]) && head == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && \valid[3] == 1) && \valid[7] == 1) && 30 == unknown-#length-unknown[13]) && 1 == systemActive) && 30 == unknown-#length-unknown[10]) && \valid[12] == 1) && \valid[4] == 1) && \valid[1] == 1) && unknown-#length-unknown[6] == 21) && \valid[14] == 1) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && head == 0) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && unknown-#memory_int-unknown[1][0] == 48) && tmp == systemActive) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && retValue_acc == \result) && \valid[10] == 1) && \valid[8] == 1) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && retValue_acc == 1) && cleanupTimeShifts == 4) && #NULL == 0 [2022-11-19 06:51:08,203 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) [2022-11-19 06:51:08,204 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(\old(waterLevel) == 2)) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive) [2022-11-19 06:51:08,205 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((waterLevel == 1 && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || (((!(0 < waterLevel) && waterLevel <= \old(waterLevel)) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) && \old(waterLevel) == waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((!(0 < waterLevel) && waterLevel <= \old(waterLevel)) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) && waterLevel == 1))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-19 06:51:08,206 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(\old(waterLevel) == 2)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) [2022-11-19 06:51:08,206 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(waterLevel == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || pumpRunning == 1) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 == waterLevel)) [2022-11-19 06:51:08,208 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 < waterLevel)) || !(1 == systemActive)) || !(waterLevel <= 2) [2022-11-19 06:51:08,208 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || ((pumpRunning == 0 && waterLevel == 1) && tmp == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || 0 == systemActive) || ((pumpRunning == 0 && waterLevel == 1) && tmp == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((\old(waterLevel) == waterLevel && tmp == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) [2022-11-19 06:51:08,209 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || ((pumpRunning == 0 && waterLevel == 1) && tmp == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || 0 == systemActive) || ((pumpRunning == 0 && waterLevel == 1) && tmp == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((\old(waterLevel) == waterLevel && tmp == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) [2022-11-19 06:51:08,212 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-19 06:51:08,214 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || ((pumpRunning == 0 || !(0 < waterLevel)) && tmp == 1)) || !(waterLevel <= 2)) || waterLevel < 2) || (!(\old(pumpRunning) == 0) && 0 < waterLevel)) && (((!(waterLevel == 1) || ((pumpRunning == 0 || !(0 < waterLevel)) && tmp == 0)) || !(1 == systemActive)) || (!(\old(pumpRunning) == 0) && 0 < waterLevel)) [2022-11-19 06:51:08,269 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/witness.graphml [2022-11-19 06:51:08,269 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-19 06:51:08,271 INFO L158 Benchmark]: Toolchain (without parser) took 77028.48ms. Allocated memory was 146.8MB in the beginning and 497.0MB in the end (delta: 350.2MB). Free memory was 115.2MB in the beginning and 447.8MB in the end (delta: -332.6MB). Peak memory consumption was 18.5MB. Max. memory is 16.1GB. [2022-11-19 06:51:08,271 INFO L158 Benchmark]: CDTParser took 0.28ms. Allocated memory is still 100.7MB. Free memory is still 57.3MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-19 06:51:08,271 INFO L158 Benchmark]: CACSL2BoogieTranslator took 602.56ms. Allocated memory is still 146.8MB. Free memory was 115.2MB in the beginning and 114.8MB in the end (delta: 439.3kB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-11-19 06:51:08,272 INFO L158 Benchmark]: Boogie Procedure Inliner took 79.60ms. Allocated memory is still 146.8MB. Free memory was 114.8MB in the beginning and 112.2MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-19 06:51:08,273 INFO L158 Benchmark]: Boogie Preprocessor took 45.41ms. Allocated memory is still 146.8MB. Free memory was 112.2MB in the beginning and 110.6MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-19 06:51:08,274 INFO L158 Benchmark]: RCFGBuilder took 762.05ms. Allocated memory is still 146.8MB. Free memory was 110.6MB in the beginning and 85.4MB in the end (delta: 25.2MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. [2022-11-19 06:51:08,274 INFO L158 Benchmark]: TraceAbstraction took 75390.60ms. Allocated memory was 146.8MB in the beginning and 497.0MB in the end (delta: 350.2MB). Free memory was 84.4MB in the beginning and 453.0MB in the end (delta: -368.6MB). Peak memory consumption was 267.5MB. Max. memory is 16.1GB. [2022-11-19 06:51:08,274 INFO L158 Benchmark]: Witness Printer took 137.35ms. Allocated memory is still 497.0MB. Free memory was 453.0MB in the beginning and 447.8MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-19 06:51:08,279 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.28ms. Allocated memory is still 100.7MB. Free memory is still 57.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 602.56ms. Allocated memory is still 146.8MB. Free memory was 115.2MB in the beginning and 114.8MB in the end (delta: 439.3kB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 79.60ms. Allocated memory is still 146.8MB. Free memory was 114.8MB in the beginning and 112.2MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 45.41ms. Allocated memory is still 146.8MB. Free memory was 112.2MB in the beginning and 110.6MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 762.05ms. Allocated memory is still 146.8MB. Free memory was 110.6MB in the beginning and 85.4MB in the end (delta: 25.2MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. * TraceAbstraction took 75390.60ms. Allocated memory was 146.8MB in the beginning and 497.0MB in the end (delta: 350.2MB). Free memory was 84.4MB in the beginning and 453.0MB in the end (delta: -368.6MB). Peak memory consumption was 267.5MB. Max. memory is 16.1GB. * Witness Printer took 137.35ms. Allocated memory is still 497.0MB. Free memory was 453.0MB in the beginning and 447.8MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 440]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 67 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 75.3s, OverallIterations: 13, TraceHistogramMax: 4, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 14.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2705 SdHoareTripleChecker+Valid, 4.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2673 mSDsluCounter, 3292 SdHoareTripleChecker+Invalid, 4.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2449 mSDsCounter, 1288 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4833 IncrementalHoareTripleChecker+Invalid, 6121 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1288 mSolverCounterUnsat, 843 mSDtfsCounter, 4833 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1119 GetRequests, 793 SyntacticMatches, 24 SemanticMatches, 302 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9457 ImplicationChecksByTransitivity, 40.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=461occurred in iteration=12, InterpolantAutomatonStates: 145, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 13 MinimizatonAttempts, 295 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 40 LocationsWithAnnotation, 1192 PreInvPairs, 1250 NumberOfFragments, 1651 HoareAnnotationTreeSize, 1192 FomulaSimplifications, 4556 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 40 FomulaSimplificationsInter, 22086 FormulaSimplificationTreeSizeReductionInter, 6.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 8.0s InterpolantComputationTime, 1045 NumberOfCodeBlocks, 1015 NumberOfCodeBlocksAsserted, 20 NumberOfCheckSat, 1253 ConstructedInterpolants, 0 QuantifiedInterpolants, 4961 SizeOfPredicates, 43 NumberOfNonLiveVariables, 1900 ConjunctsInSsa, 124 ConjunctsInUnsatCore, 22 InterpolantComputations, 10 PerfectInterpolantSequences, 509/736 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: OVERALL_TIME: 7.3s, ICFG_INTERPRETER_ENTERED_PROCEDURES: 4, DAG_INTERPRETER_EARLY_EXIT_QUERIES_NONTRIVIAL: 44, DAG_INTERPRETER_EARLY_EXITS: 6, TOOLS_POST_APPLICATIONS: 59, TOOLS_POST_TIME: 1.5s, TOOLS_POST_CALL_APPLICATIONS: 22, TOOLS_POST_CALL_TIME: 3.6s, TOOLS_POST_RETURN_APPLICATIONS: 18, TOOLS_POST_RETURN_TIME: 1.5s, TOOLS_QUANTIFIERELIM_APPLICATIONS: 99, TOOLS_QUANTIFIERELIM_TIME: 6.5s, TOOLS_QUANTIFIERELIM_MAX_TIME: 0.8s, FLUID_QUERY_TIME: 0.0s, FLUID_QUERIES: 123, FLUID_YES_ANSWERS: 0, DOMAIN_JOIN_APPLICATIONS: 17, DOMAIN_JOIN_TIME: 0.5s, DOMAIN_ALPHA_APPLICATIONS: 0, DOMAIN_ALPHA_TIME: 0.0s, DOMAIN_WIDEN_APPLICATIONS: 1, DOMAIN_WIDEN_TIME: 0.0s, DOMAIN_ISSUBSETEQ_APPLICATIONS: 2, DOMAIN_ISSUBSETEQ_TIME: 0.0s, DOMAIN_ISBOTTOM_APPLICATIONS: 44, DOMAIN_ISBOTTOM_TIME: 0.1s, LOOP_SUMMARIZER_APPLICATIONS: 1, LOOP_SUMMARIZER_CACHE_MISSES: 1, LOOP_SUMMARIZER_OVERALL_TIME: 3.0s, LOOP_SUMMARIZER_NEW_COMPUTATION_TIME: 3.0s, LOOP_SUMMARIZER_FIXPOINT_ITERATIONS: 2, CALL_SUMMARIZER_APPLICATIONS: 18, CALL_SUMMARIZER_CACHE_MISSES: 3, CALL_SUMMARIZER_OVERALL_TIME: 0.2s, CALL_SUMMARIZER_NEW_COMPUTATION_TIME: 0.2s, PROCEDURE_GRAPH_BUILDER_TIME: 0.0s, PATH_EXPR_TIME: 0.0s, REGEX_TO_DAG_TIME: 0.0s, DAG_COMPRESSION_TIME: 0.0s, DAG_COMPRESSION_PROCESSED_NODES: 439, DAG_COMPRESSION_RETAINED_NODES: 106, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 223]: Loop Invariant Derived loop invariant: ((((((waterLevel == 1 && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || (((!(0 < waterLevel) && waterLevel <= \old(waterLevel)) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) && \old(waterLevel) == waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((!(0 < waterLevel) && waterLevel <= \old(waterLevel)) || (pumpRunning == 0 && waterLevel <= \old(waterLevel))) && waterLevel == 1))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 456]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: (((((2 == waterLevel && 1 == systemActive) && splverifierCounter == 0) && !(0 == systemActive)) && pumpRunning == 1) || ((((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive))) || ((pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 446]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 358]: Loop Invariant Derived loop invariant: pumpRunning == 0 && splverifierCounter == 0 - InvariantResult [Line: 171]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 < waterLevel)) || !(1 == systemActive)) || !(waterLevel <= 2) - InvariantResult [Line: 197]: Loop Invariant Derived loop invariant: ((((!(waterLevel == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || pumpRunning == 1) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 == waterLevel)) - InvariantResult [Line: 135]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) - InvariantResult [Line: 372]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || ((pumpRunning == 0 && waterLevel == 1) && tmp == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || 0 == systemActive) || ((pumpRunning == 0 && waterLevel == 1) && tmp == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((\old(waterLevel) == waterLevel && tmp == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) - InvariantResult [Line: 527]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((((((((((((((((((((((unknown-#length-unknown[15] == 25 && 9 == unknown-#length-unknown[5]) && unknown-#length-unknown[9] == 21) && 30 == unknown-#length-unknown[7]) && 1 == \valid[5]) && unknown-#length-unknown[3] == 12) && \valid[15] == 1) && pumpRunning == 0) && \valid[9] == 1) && unknown-#length-unknown[12] == 25) && \valid[11] == 1) && methaneLevelCritical == 0) && 30 == unknown-#length-unknown[4]) && 31 == unknown-#length-unknown[2]) && head == 0) && 2 == unknown-#length-unknown[1]) && unknown-#length-unknown[8] == 9) && \valid[3] == 1) && \valid[7] == 1) && 30 == unknown-#length-unknown[13]) && 1 == systemActive) && 30 == unknown-#length-unknown[10]) && \valid[12] == 1) && \valid[4] == 1) && \valid[1] == 1) && unknown-#length-unknown[6] == 21) && \valid[14] == 1) && 9 == unknown-#length-unknown[14]) && \valid[0] == 0) && head == 0) && \valid[2] == 1) && #NULL == 0) && 9 == unknown-#length-unknown[11]) && waterLevel == 1) && unknown-#memory_int-unknown[1][0] == 48) && tmp == systemActive) && \valid[6] == 1) && unknown-#memory_int-unknown[1][1] == 0) && retValue_acc == \result) && \valid[10] == 1) && \valid[8] == 1) && \valid[13] == 1) && 0 < unknown-#StackHeapBarrier-unknown) && retValue_acc == 1) && cleanupTimeShifts == 4) && #NULL == 0 - InvariantResult [Line: 146]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(\old(waterLevel) == 2)) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 527]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 380]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(0 == systemActive)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) || ((pumpRunning == 0 && waterLevel == 1) && tmp == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || 0 == systemActive) || ((pumpRunning == 0 && waterLevel == 1) && tmp == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((\old(waterLevel) == waterLevel && tmp == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) == 2)) || 0 == systemActive) - InvariantResult [Line: 55]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 219]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || !(\old(waterLevel) == 2)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) - InvariantResult [Line: 440]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) == 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 175]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || ((pumpRunning == 0 || !(0 < waterLevel)) && tmp == 1)) || !(waterLevel <= 2)) || waterLevel < 2) || (!(\old(pumpRunning) == 0) && 0 < waterLevel)) && (((!(waterLevel == 1) || ((pumpRunning == 0 || !(0 < waterLevel)) && tmp == 0)) || !(1 == systemActive)) || (!(\old(pumpRunning) == 0) && 0 < waterLevel)) RESULT: Ultimate proved your program to be correct! [2022-11-19 06:51:08,344 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_277c9f30-0364-41e6-bfa4-34e475d9211e/bin/utaipan-I9t0OCRTmS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE